Distributed support for public and private accountability in digital ecosystems

ABSTRACT

Digital ecosystems are distributed software environments through which organisations can seamlessly access customised, potentially disposable, services to aid them carry out a myriad of tasks. Peer to peer networks are often cited as a suitable platform for digital ecosystem deployment. A typical feature of such systems is the lack of a point of control. In this regard these are untrusted environments. This lack of trust acts as a barrier to commercial applications emerging on these platforms. Suitable mechanisms for identity, authentication and trust evolution are required to overcome this. This paper provides a model for distributed accountability in digital ecosystems which can strengthen the trust in the system both from a external viewpoint (i.e. the system as a whole) and between individuals within the system.

REFERENCES

• 1: M. Abadi and N. Glew. Certified email with a light on-line trusted third party: design and implementation. In Proceedings of the 11th International Conference on Wold Wide Web (WWW-02), pages 387--395. ACM Press, 2002.
• 2: G. Bella and L. C. Paulson. Accountability protocols: Formalized and verified. ACM Transactions on Information and System Security, 9:138--161, 2006.
• 3: D. Brin. The Transparent Society: Will Technology Force Us to Choose Between Privacy and Freedom? Perseus Books, 1999.
• 4: G. Bullock. Governance, accountability, and legitimacy, 2006.
• 5: W. Diffie and M. E. Hellman. New directions in cryptography. IEEE Transactions on Information Theory, (22):644--654, 1976.
• 6: Hausheer and Stiller. Peermint: Decentralized and secure accounting for peer-to-peer applications. In Networking: Networking Technologies, Services, and Protocols; Performance of Computer and Communication Networks; Mobile and Wireless Communications, International IFIP-TC6 Networking Conference, LNCS, volume 4, 2005.
• 7: S. Kremer, O. Markowitch, and J. Zhou. An intensive survey of fair non-repudiation protocols. Computer Communications, 25(17):1606--1621, 2002.
• 8: O. Markowitch and Y. Roggeman. Probabilistic non-repudiation without trusted third party. Technical Report 399, ULB, 1999.
• 9: J. McGibney and D. Botvich. A trust overlay architecture and protocol for enhanced protection against spam. In Availability, Reliability and Security, 2007. ARES 2007. The Second International Conference on, pages 749--756, 2007.
• 10: J. Mitsianis. A new approach to enforcing non-repudiation of receipt, 2001.
• 11: H. Nissenbaum. Computing and accountability. CACM: Communications of the ACM, 37, 1994.
• 12: P. Robinson, N. Cook, and S. K. Shrivastava. Implementing fair non-repudiable interactions with web services. In EDOC, pages 195--206. IEEE Computer Society, 2005.
• 13: A. Rowstron and P. Druschel. Pastry, scalable, distributed object location and routing for large- scale peer-to-peer systems. In Proceedings of IFIP/ACM Middleware. Springer, 2001.
• 14: A. Schedler. Conceptualizing Accountability, pages 13--28. Lynne Rienner Publishers, London, 1999.
• 15: F. B. Viegas. Bloggers' expectations of privacy and accountability: An initial survey. Journal of Computer-Mediated Communication, 2005.
• 16: V. Vishnumurthy, S. Chandrakumar, and E. G. Sirer. Karma: A secure economic framework for peer-to-peer resources. In Workshop on Economics of Peer-to-Peer Systems, 2003.
• 17: P. Winn. Online court records: Balancing judicial accountability and privacy in an age of electronic information. Washington Law Review, 2004.
• 18: Y. Zhang and K.-J. Lin. Hierarchical management of service accountability in service oriented architectures. In SOCA, pages 55--64. IEEE Computer Society, 2007.
• 19: Y. Zhang, K.-J. Lin, and T. Yu. Accountability in service-oriented architecture: Computing with reasoning and reputation. In ICEBE, pages 123--131. IEEE Computer Society, 2006.
• 20: Zhou and Gollmann. A fair non-repudiation protocol. In RSP: 17th IEEE Computer Society Symposium on Research in Security and Privacy, 1996.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)
      C.2.4 Distributed Systems

Keywords:
digital ecosystems infrastructure, security and privacy